How to get the Max out of row and field name of the max value

[sangs8788]

Hi,

I have below resultset in place.

How do I get the Max by row and the Month when the Max happened. Something like below result

Module	Month when Max occured	Max Value
AppSDK	Aug-2020	4.21
Comments	Aug-2020	0.10
ControlCenter	Jan-2020	0.72

Thanks

[ITWhisperer · Accepted solution]

Working with what you have (although it might be slightly easier to change your chart command first)

| untable Module _time count
| sort Module -count
| streamstats count as row by Module 
| where row=1 
| fields - row

[sangs8788]

Thanks it worked